Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
1,951–2,000 of 99,069
Brit Europeanbriteuropean.co.uk
Transportation · United Kingdom
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Brit European is a well-established UK-based international logistics provider founded in 1924, specializing in diverse market segments including vehicle transport and construction equipment logistics. The company emphasizes innovation, flexibility, and service excellence, supported by a network of reputable partners such as Shell and Prometeon. Their digital presence is built on WordPress with modern plugins and integrations, including active social media channels and a customer login portal. The website is professionally designed with good content quality and SEO optimization, providing clear information about services and company ethos. Technically, the website uses a modern tech stack including WordPress, Bootstrap, and jQuery, with performance and mobile optimization rated as good. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers are missing and no incident response or vulnerability disclosure policies are found. WHOIS data is unavailable due to domain naming rules violation, which slightly impacts trust but the website content and partner listings support legitimacy. Overall, the security posture is moderate with room for improvement in headers and incident response readiness. Privacy compliance is good with GDPR-aligned policies and cookie mechanisms. The business credibility is strong given the company's long history, partner ecosystem, and professional web presence. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen trust and compliance.
Peter Watson Garagepwskipton.co.uk
Transportation · United Kingdom
64Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Peter Watson Garage is a well-established family-run automotive service provider based in Skipton, UK, with a history dating back to 1966. The company offers a comprehensive range of car servicing, repairs, MOT testing, diagnostics, and used car sales, positioning itself as a trusted local alternative to main dealers. Their website reflects a professional and customer-focused approach, emphasizing quality workmanship and honest advice. Technically, the site is built on WordPress with modern analytics tools like Google Analytics and Microsoft Clarity, and it is hosted by a reputable registrar. Security posture is good with HTTPS and privacy-conscious tracking, though some security headers could be improved. The business demonstrates strong credibility through customer reviews and certifications such as Castrol Certified Service. Overall, the site is accessible, well-structured, and compliant with GDPR requirements, making it a reliable digital presence for the business.
- SSave the Children UK
savethechildren.org.uk
Non-profit · United Kingdom
73Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Save the Children UK is a well-established children's charity operating across the UK and internationally in over 100 countries. The organization focuses on ensuring children are fed, educated, and treated fairly, providing humanitarian aid and advocacy. The website reflects a strong market position as a leading non-profit with comprehensive services including child education, health, hunger relief, and emergency response. The digital infrastructure is built on Drupal CMS with modern analytics and consent management tools, demonstrating a mature technical setup. Security posture is robust with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though there is room for improvement in publishing vulnerability disclosure and incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a high level of user trust and engagement.
- Hertfordshire Couriers Ltd
hertfordshirecouriersltd.co.uk
Transportation · United Kingdom
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Hertfordshire Couriers Ltd operates a website hosted on the Wix platform, offering courier and delivery services primarily targeting businesses and individuals in Hertfordshire, UK. The website presents basic information about their services but lacks comprehensive business details, contact information, and legal policies. The site is not indexed by search engines due to the 'noindex' directive, limiting its online visibility. Technically, the website uses standard Wix technologies and polyfills, providing moderate performance and mobile optimization. However, the absence of privacy and cookie policies, security headers, and contact details indicates a low level of digital maturity and compliance. The WHOIS lookup failed due to domain naming rule violations, suggesting the domain may not be properly registered or active, which raises significant legitimacy concerns. Overall, the security posture is minimal with no advanced protections or incident response mechanisms evident.
Fine Art Mouldingsfineartmouldings.co.uk
Other · United Kingdom
70Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Fine Art Mouldings is a specialized bespoke decorative plasterwork company based in the United Kingdom, with over 30 years of experience. They offer design, manufacture, restoration, and installation services primarily targeting private residences, commercial properties, and prestigious public buildings. The company positions itself as an award-winning leader in heritage and bespoke plaster mouldings, emphasizing craftsmanship and quality. Technically, the website is built on WordPress with WooCommerce and several modern JavaScript libraries, providing a professional and responsive user experience. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. The WHOIS data is unavailable due to domain registration errors, which slightly impacts trust but the website content and branding are consistent and professional. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security best practices.
Design Central (Bath) Ltddc-activ.com
Technology · United Kingdom
61Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
ImpactXP is a UK-based technology company offering an AI-driven commercial leadership platform designed for consumer packaged goods (CPG) brands and retailers. Their integrated system combines marketing, data analytics, and immersive research tools to enable collaborative category development and commercial strategy execution. The company positions itself as an innovative leader with a comprehensive suite of modules including PlanogramXP, RangeXP, ShopperXP, EngageXP, and ResearchXP, complemented by a creative services team. The website reflects a professional and modern digital presence with strong branding and clear messaging targeting enterprise and medium-sized CPG clients. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses reputable third-party services such as Google Analytics and reCAPTCHA for analytics and security. Hosting and DNS are managed via Dreamscape Networks and Cloudflare respectively, ensuring reliable performance and security. The site is mobile-optimized, SEO-friendly, and implements GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and integrates CAPTCHA to protect forms. However, it lacks some advanced security headers and does not publish a formal security policy or incident response contacts, which could be improved. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong with clear policies and consent management. Overall, ImpactXP presents a trustworthy and professional online presence with a solid technical foundation and good privacy practices. Strategic recommendations include enhancing DNS security with DNSSEC, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.
JD Motor Companyjdmotorcompany.co.uk
Transportation · United Kingdom
58Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
JD Motor Company is a small, local used car dealership based in Nottinghamshire, United Kingdom, specializing in quality used vehicles with a focus on customer finance options. The company offers a broad range of automotive services including vehicle sales, finance, body repair, and car buying for cash. Their market position is that of a trusted regional dealer with a professional online presence and active social media engagement. Technically, the website is built using standard web technologies such as HTML5, CSS3, JavaScript, and popular libraries like jQuery and Owl Carousel, providing a good user experience with mobile optimization and clear navigation. However, the absence of privacy and cookie policies indicates a gap in compliance with data protection regulations. Security posture is moderate with HTTPS assumed but lacking explicit security headers and vulnerability disclosures. The WHOIS data is unavailable due to domain registration issues, which raises concerns about domain legitimacy despite the professional website appearance. Overall, the site is functional and trustworthy for users but would benefit from enhanced compliance and security measures.
- VVercel Security Checkpoint
redtailtelematics.com
Other
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.redtailtelematics.com is currently inaccessible due to a Vercel Security Checkpoint blocking access. This security mechanism prevents retrieval of any meaningful content, metadata, or business information from the site. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered or protected by privacy mechanisms, which raises concerns about the domain's legitimacy. Without access to the actual website content, no assessment of business operations, services, or compliance can be made. The technical infrastructure is hosted on Vercel and uses Astro framework, but performance and optimization details are unavailable due to the block. Security posture cannot be evaluated beyond the presence of the security checkpoint itself. Overall, the site presents a high risk due to lack of accessible information and domain registration data.
Government · United Kingdom
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
GOV.UK is the official digital platform of the UK government, providing centralized access to a wide range of government services and information. It serves UK residents, businesses, and citizens with services spanning benefits, taxation, immigration, education, and more. The website is managed by the Government Digital Service and is a critical infrastructure for public sector digital engagement. The platform holds a strong market position as the primary government portal in the UK. Technically, the website employs modern web technologies including JavaScript frameworks, performance measurement tools like Lux, and Google Analytics 4 for user behavior insights. It uses a custom CMS (publishing-api) tailored for government content publishing. The site is optimized for accessibility, mobile responsiveness, and SEO, ensuring a high-quality user experience. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and implements a cookie consent mechanism. However, explicit security policies and incident response information are not publicly detailed. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy with a long registration history and direct registration with Nominet, consistent with government domain practices. Overall, GOV.UK demonstrates a mature digital presence with excellent content quality, technical implementation, and privacy compliance. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to further enhance trust and transparency.
- Phoenix 2025
phoenixps.com
Other
70Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The website 'Phoenix 2025' appears to be a minimal Wix-built site with very limited content and no clear business description or contact information. The domain WHOIS data is unavailable, indicating the domain may not be registered or WHOIS data is private, which raises concerns about legitimacy. Technically, the site uses Wix platform technologies and includes some modern JavaScript polyfills and Sentry for error monitoring, but lacks security headers and privacy compliance features. The security posture is weak due to missing policies and contact channels for incident response. Overall, the site presents a low trust profile with poor SEO and minimal business credibility.
Other
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.mayorsfundforlondon.org.uk is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to the site's content. This prevents extraction of meaningful business, contact, or policy information. The WHOIS lookup failed due to domain naming rule violations, resulting in no registrar or registration data available. The site uses Cloudflare as a hosting and security provider, indicating some level of security infrastructure, but the lack of accessible content and WHOIS data limits the ability to assess the business or security posture comprehensively. Overall, the site appears to be protected against bots but lacks publicly accessible information for detailed analysis.
Grafton Empty Homesgraftonemptyhomes.com
Real Estate · United Kingdom
53Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Grafton Empty Homes is a UK-based company specializing in transforming empty properties into homes by partnering with property owners, local authorities, and residents. Positioned as the UK's Empty Property and Derelict Land Solutions Company, it offers free research services and tailored solutions to rehabilitate unused properties. The website reflects a professional and community-focused business model with clear service offerings and trust indicators such as company registration and licensing under the Data Protection Act. Technically, the website is built on Concrete CMS, utilizing modern web technologies like jQuery and Lottie animations. It is mobile-optimized, accessible, and includes essential SEO and privacy features such as GDPR-compliant privacy and cookie policies. Google Analytics is employed for user tracking with a moderate level of data collection. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable anomaly, raising questions about domain legitimacy despite the professional web presence and company information. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. However, the WHOIS inconsistency and missing security headers suggest areas for improvement to enhance trust and security posture.
- LLRS Lighting
lrs-lighting.com
Retail
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
LRS Lighting operates as a retail business specializing in lighting products, targeting consumers and businesses seeking lighting solutions. The website appears to be built on WordPress and utilizes Font Awesome Pro icons for UI elements. The technical infrastructure is basic with moderate performance and mobile optimization. Security posture is limited with no evident security headers or advanced configurations, and privacy compliance is lacking due to absence of privacy and cookie policies. The domain is well-established since 2014 with a reputable registrar, indicating legitimacy. Overall, the website serves its retail purpose but requires improvements in security and compliance to enhance trust and user confidence.
The Harris Federationharrisfederation.org.uk
Education · United Kingdom
74Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
The Harris Federation is a well-established not-for-profit educational charity operating since 1991, managing a large network of primary and secondary academies in London and Essex. The organization also provides extensive teacher training and leadership development programs, positioning itself as a leader in the UK education sector. The website reflects a mature digital presence with professional design, clear navigation, and rich multimedia content supporting its educational mission. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response policies could enhance protection. The WHOIS data is unavailable due to domain naming rules issues, which is unusual but the website content and branding strongly indicate legitimacy. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its audience and business model.
Security Verificationavtrade.com
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.avtrade.com is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. No actual business content, navigation, or company information is available for analysis. The WHOIS query for the domain returned no match, indicating the domain may be unregistered, expired, or privacy protected with no public data. This severely limits the ability to assess the legitimacy, business model, or market position of the entity behind the domain. Technically, the site uses modern frontend libraries such as Bootstrap and Google reCAPTCHA, but lacks visible security headers or SSL information in the provided data. Privacy and compliance policies are absent, and no contact or trust indicators are present.
Thermal Transfer Solutions Ltdthermaltransfersolutions.com
Manufacturing · United Kingdom
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Thermal Transfer Solutions Ltd is a medium-sized manufacturing company established in 2006 and operating as part of the TODAYTEC Group. It is Europe's largest independently owned converter and supplier of thermal transfer ribbons, serving a B2B audience including resellers and industrial clients. The company offers a comprehensive range of thermal transfer ribbons, consultancy, testing, development, and custom branding services. The website is built on WordPress with a modern tech stack and good SEO practices, providing a professional and user-friendly experience. Security posture is strong with HTTPS and reCAPTCHA, though some security headers and explicit privacy policies are missing. WHOIS data is unavailable or blocked, which raises some trust concerns despite the professional presentation. Overall, the site is credible and well-maintained but would benefit from enhanced privacy and security disclosures.
Corona Supplies Ltdcoronasupplies.co.uk
Healthcare · United Kingdom
67Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Corona Supplies Ltd is a UK-based small business specializing in corona treatment solutions, equipment, and support services. The company targets UK businesses and organizations requiring specialized corona treatment equipment. Their market position is that of a niche supplier within the healthcare sector, providing expert solutions and customer support. The website is built on WordPress using the Gutenberg editor, with integration of Google Analytics and Google Tag Manager for tracking. The technical infrastructure is modern and mobile-optimized, offering a good user experience and professional design. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices. The WHOIS data is unavailable due to domain naming errors reported by Nominet UK, which raises some concerns about domain legitimacy that should be further investigated.
The Umbrella Companytheumbrellacompany.co.uk
Retail · United Kingdom
59Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Umbrella Company operates a professional e-commerce and retail website specializing in branded umbrellas and parasols, targeting businesses and consumers in the UK market. Their product range includes golf umbrellas, walking umbrellas, telescopic umbrellas, parasols, and UK-made products, positioning them as a niche leader in promotional umbrella products. The website is built on WordPress with WooCommerce, integrating modern technologies such as Ajax Search Pro, Google Analytics, and Tawk.to live chat for enhanced user experience and analytics. The site is mobile-optimized and features a clear navigation structure with product categories and contact information prominently displayed. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which raises some concerns about domain registration legitimacy, though the website content and structure appear professional and trustworthy. Overall, the site scores well on content quality and business credibility but should address privacy compliance and security header implementation to enhance trust and compliance.
Hachette UKhachette.co.uk
Media · United Kingdom
69Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Hachette UK is a prominent UK trade publishing group operating multiple well-known imprints and serving a broad audience of readers, authors, and educational institutions. The company is part of the global Hachette Livre group and maintains a strong market position in the media and publishing industry. Their website reflects a professional and content-rich digital presence, leveraging WordPress CMS and modern web technologies to deliver an engaging user experience. The site is well-optimized for mobile devices and includes comprehensive privacy and cookie policies with active consent management, demonstrating compliance with GDPR requirements. Security posture is solid with HTTPS enforcement and security headers, although explicit security policy and incident response information are not publicly available. WHOIS data could not be retrieved due to querying the 'www' subdomain, but the domain is likely legitimate given the brand recognition and website professionalism. Overall, the website is trustworthy, safe, and well-maintained, supporting the company's business objectives effectively.
- Wwww.rockportpresentations.com
rockportpresentations.com
Other
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website at www.rockportpresentations.com/lander is currently a minimal placeholder or parking page with no substantive content or business information. The domain appears unregistered or parked as indicated by the WHOIS query returning no match. The site uses basic React-based JavaScript and external scripts from a parking service provider but lacks any metadata, structured data, or contact details. There is no evidence of an active business presence or digital maturity. Security posture is poor with no HTTPS or security headers detected, and privacy compliance is absent. Overall, the site is not operational as a business website and presents a high risk due to lack of legitimacy and transparency.
Kirks Insolvencykirks.co.uk
Finance · United Kingdom
51Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kirks Insolvency is a UK-based professional services firm specializing in insolvency, business rescue, and recovery solutions. The company targets businesses under financial pressure, offering tailored insolvency advice and sector-specific services. Their website presents a professional image with clear contact information and a focus on client support through guides and FAQs. Technically, the website is built on WordPress with modern plugins and frameworks, including CookieYes for consent management and Google Analytics for traffic analysis. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks advanced security headers and explicit security policies. The WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness from a domain registration perspective. Overall, the website is professional, secure, and compliant with privacy norms, though it could improve transparency around security policies and incident response.
Georgsmarienhütte GmbHgmh.de
Manufacturing · Germany
73Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Georgsmarienhütte GmbH is a well-established German steel manufacturer specializing in sustainable and high-quality steel products, including raw steel, bar steel, and blank steel. Founded in 1856 and operating under the GMH Gruppe, the company is a pioneer in green steel production using electric arc furnace technology, contributing significantly to circular economy efforts. Their key markets include automotive, machinery, and energy sectors, supported by a comprehensive product portfolio and sustainability initiatives such as TÜV SÜD validated Product Carbon Footprint calculations. Technically, the website is built on a modern WordPress platform with Bootstrap and Alpine.js, featuring responsive design, good SEO, and accessibility standards. Security is well addressed with strict Content Security Policies, HTTPS, and other headers, although explicit security and incident response policies are not published. Cookie consent is managed via Borlabs Cookie, ensuring GDPR compliance to a good extent. The security posture is strong with no visible vulnerabilities or exposed sensitive data, but the absence of a privacy policy and terms of service pages represents compliance gaps. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and technically sound digital presence for a large manufacturing enterprise.
Ace Comics / Planet Ace Ltdacecomics.co.uk
Retail · United Kingdom
63Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Ace Comics is a well-established UK-based retailer specializing in comic books, graphic novels, and cult merchandise. Operating since 1981 under Planet Ace Ltd, the company offers a broad range of products including subscriptions, back issues, and collectibles through multiple channels such as physical stores, an e-commerce website, and an Ebay store. Their market position is that of a trusted and reliable supplier within the UK comic retail sector, targeting enthusiasts and collectors of popular franchises like Marvel, DC, Star Wars, and Doctor Who. Technically, the website is built on a mature WordPress and WooCommerce platform, enhanced with Yoast SEO, Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, some security headers are not explicitly detected, and there is no published security policy or incident response information. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements a cookie consent banner with an opt-out mechanism, indicating good privacy compliance and user protection. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms a long-standing domain registration consistent with the business claims, enhancing trustworthiness. Overall, Ace Comics presents a professional and trustworthy online presence with solid privacy and security practices. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contacts to further strengthen their security posture and customer trust.
- TGM
tgm.co.uk
Real Estate · United Kingdom
60Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
TGM is a UK-based family-operated business specializing in commercial roofing and drainage maintenance, founded in 1997. The company holds a strong market position as a premier specialist partner for working at height, offering a range of services including roof maintenance, reactive repairs, fall protection systems, gutter and drain cleaning, and lightning surge protection. Their national contracts and advanced surveying capabilities underscore their technical maturity and operational scale. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Google Analytics for performance and user insights. Hosting and domain registration via Cloudflare provide robust infrastructure support. The site is mobile-optimized and SEO-friendly, with a comprehensive cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the business history, enhancing trustworthiness. Overall, TGM's digital presence reflects a professional and credible business with good security posture and privacy compliance. Strategic improvements in security policy transparency and security headers would further strengthen their security maturity and trust.
- CClairglow Heating
clairglow.co.uk
Energy · United Kingdom
60Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Clairglow Heating is a well-established UK-based heating, electrical, and building contractor with nearly five decades of experience. The company offers a range of services including boiler installations, heating system servicing, electrical installations, and kitchen and bathroom refurbishments. Their clientele includes local councils and housing associations, positioning them as a trusted regional service provider in the energy sector. The website reflects a professional business with consistent branding and trust indicators such as SafeContractor accreditation and client testimonials. Technically, the website is built on WordPress using the Elementor page builder, leveraging common libraries like jQuery and Swiper.js. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Hosting is managed through Ionos SE, consistent with the domain registrar information. From a security perspective, the site enforces HTTPS but lacks important security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The absence of analytics and tracking scripts suggests minimal user tracking, which is positive for privacy. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its security posture and regulatory adherence.
GoDaddy Operating Company, LLCjohnodonnell.com
E-commerce · Germany
67Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website johnodonnell.com is a domain sales landing page hosted and operated by GoDaddy Operating Company, LLC, a leading global domain registrar and aftermarket platform. The site offers the domain for sale at a fixed price with secure transaction and fast transfer guarantees. The target audience is domain investors and buyers, primarily German-speaking, as indicated by the localized content. The business model is focused on domain aftermarket sales, leveraging GoDaddy's extensive infrastructure and brand trust. The marketplace position is strong, supported by a high Trustpilot rating and professional presentation. Technically, the site is built using modern web technologies including React 18 and Next.js, ensuring good performance, mobile optimization, and accessibility. Security best practices are observed with HTTPS enforcement, security headers, and reCAPTCHA integration for forms. The site uses multiple external trusted domains for analytics, payment processing, and customer reviews, maintaining a secure and compliant environment. Security posture is robust with no detected vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, which could be improved. Privacy compliance is strong with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. Business credibility is reinforced by clear contact phone numbers, professional content, and trust indicators. Overall, the website presents a low-risk profile with a solid security and privacy foundation. Strategic recommendations include publishing dedicated security and incident response pages, adding vulnerability disclosure information, and enhancing security contact transparency to further strengthen trust and compliance.
Clive Holmes Ltd.chs.agency
Media · United Kingdom
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
CHS is a well-established, independent creative agency based in Dorset, UK, with a history dating back to 1973. The company offers integrated creative services including branding, advertising, digital technology, content production, and communications. It serves a broad range of UK clients, including notable brands such as HSBC, Allianz, and Lakeland, positioning itself as a leading agency outside London. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress 7.0.2 with modern libraries such as jQuery, Bootstrap, and GSAP, ensuring a responsive and accessible user interface. The site uses HTTPS with good SSL configuration and integrates analytics tools like Google Analytics and CANDDi for user tracking. However, some security best practices such as security headers and explicit incident response policies are missing. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. The lack of explicit security policies and cookie consent mechanisms suggests room for improvement in privacy compliance. WHOIS data is privacy protected, which is typical for agencies, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained. Strategic recommendations include implementing security headers, publishing security and incident response policies, enhancing GDPR compliance with cookie consent, and maintaining regular audits of third-party scripts to mitigate risks. These steps will strengthen the security posture and enhance user trust.
KUE Group Limitedkuegroup.com
Energy · United Kingdom
59Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
KUE Group Limited is a UK-based company specializing in steel surface preparation, coating, and lining services primarily for the power generation industry. The company holds a strong market position as the sole UK licensee of SÄKAPHEN® coatings and offers both on-site and in-house grit blasting and corrosion protection services. Their website reflects a professional industrial service provider targeting clients in energy and related sectors. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Owl Carousel. It integrates Google Analytics and HubSpot for marketing and user engagement. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA on forms, but lacks visible security headers and an incident response contact, which are areas for improvement. The absence of WHOIS data for the domain is a notable anomaly that reduces trust slightly, although the website content and certifications suggest a legitimate business. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, with good content quality and clear business information.
- AAlutool
alutool.co.uk
Media · United Kingdom
57Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Alutool is a UK-based online media platform specializing in expert reviews and guides for online casinos, particularly targeting British players interested in slot games and gambling. The website offers comprehensive, well-structured content including detailed casino reviews, bonus analyses, and responsible gambling information. It operates primarily as an affiliate marketing business, providing users with trusted recommendations and links to top UK gambling platforms. Technically, the site is well-built with modern HTML5, CSS3, and JavaScript, optimized for mobile devices and SEO, and uses structured data to enhance search engine visibility. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data shows an unusual future domain creation date, which raises some legitimacy concerns, but the professional content and consistent branding support a credible business presence. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.
Tyne and Wear Fire and Rescue Servicetwfire.gov.uk
—
67Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Sylvania Groupsylvania-lighting.com
Energy
64Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Sylvania Group is a well-established company specializing in the manufacturing and marketing of eco-responsible and digital lighting solutions, boasting over 120 years of expertise. The company supports its customers throughout their projects with a comprehensive range of services, positioning itself as a significant player in the energy sector. The website reflects a professional and consistent brand image, targeting business customers and partners in lighting and energy industries. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies and analytics tools such as Google Analytics and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit privacy and terms of service pages, which are recommended for compliance and trust. The absence of WHOIS registration data is a notable concern, suggesting a need for verification of domain ownership and registration status. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance and security best practices would strengthen its posture.
AWE Europeawe-europe.com
Retail · United Kingdom
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
AWE Europe operates as a distributor of premium audiovisual products targeting the custom integration trade sector. The company maintains a professional online presence with a well-structured website showcasing multiple premium AV brands and product categories. Their business model focuses on B2B distribution within the UK market, serving integrators and trade professionals. The website employs modern web technologies including ASP.NET WebForms, jQuery, Bootstrap, and Vue.js, indicating a mature technical infrastructure. However, the absence of public WHOIS data raises concerns about domain registration transparency. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and formal privacy compliance documentation. Overall, the site is professional and trustworthy from a user perspective but would benefit from improved compliance and transparency measures.
forteq Groupforteq-group.com
Manufacturing · Switzerland
60Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
forteq Group is a global leader in precision plastic manufacturing, primarily serving the automotive industry with innovative and high-precision plastic parts. The company emphasizes innovation, quality, reliability, and sustainability, with a strong global presence and a history spanning over 50 years. Their website reflects a professional B2B business model targeting automotive and industrial clients worldwide. Technically, the website employs modern JavaScript libraries, cookie consent management via Cookiebot, and Google Analytics for traffic analysis. The site is well-optimized for mobile and SEO, with good performance and accessibility features. Security-wise, the site uses HTTPS with anonymized IP tracking and cookie consent mechanisms, but lacks some advanced security headers and explicit security policies. The domain registration is consistent and legitimate, though the domain is relatively new compared to the company's long history, suggesting a recent domain acquisition or rebranding. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.
Airedale House Business Centreairedalehouse.co.uk
Real Estate · United Kingdom
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Airedale House Business Centre operates as a serviced office provider in Leeds, offering coworking and virtual office solutions. The business targets professionals and companies seeking flexible office space with amenities such as air conditioning and scenic river views. The website is built on the Squarespace platform, featuring a professional design and good mobile optimization. However, the absence of privacy and terms of service policies, as well as lack of explicit contact information, limits the site's compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional web presence. Strategic recommendations include adding privacy and terms policies, improving security headers, and verifying domain registration status.
- SSecurity Verification
gaincoaching.com
Other
56Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.gaincoaching.com currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the actual website content is blocked by a Web Application Firewall or similar bot protection mechanism. No business content, contact information, or policies are accessible, severely limiting the ability to assess the company's offerings or market position. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, inactive, or protected by privacy services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site’s security posture is minimal, with key improvements needed in SSL configuration, security headers, and content accessibility. The lack of privacy and cookie policies also indicates poor compliance with data protection regulations.
ConnectYourDomain Error | Wix.comshaktiwomen.com
Other
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The domain www.shaktiwomen.com currently resolves to a Wix error page indicating that the domain is not connected to any live website. There is no actual business content, contact information, or policies available on the site. The domain WHOIS query returned no registration data, suggesting the domain is either unregistered or inactive. The technical infrastructure is limited to Wix platform scripts and React libraries, with no custom content or security configurations. The security posture is weak due to lack of HTTPS information and absence of security headers. Overall, the site is non-functional and does not represent an active business presence.
CCL Techlogixalpharoute.co.uk
Transportation
71Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
CCL Techlogix is a specialized provider of Managed 4PL and supply chain technology solutions, focusing on simplifying logistics complexity and enhancing operational visibility for business growth. The company leverages innovative technology and expert support to deliver services such as transport management systems, multi-carrier shipping, fleet management, and sustainability reporting. Their market position is that of a medium-sized, technology-driven logistics service provider with a professional online presence. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager, and Google Maps API. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be via UK2.net, with DNS and domain registration consistent with the business claims. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, indicating awareness of privacy compliance. However, no advanced security headers or explicit security policies were detected, and there is no visible vulnerability disclosure or incident response contact. The domain registration is transparent and consistent, with no suspicious indicators. Overall, the website presents a professional and trustworthy business front with moderate technical maturity and a solid privacy posture. Security practices could be enhanced by implementing additional headers and publishing security policies. The domain age aligns with the company's founding year, supporting legitimacy.
- Culture Dementia UK-dementia alzheimers
culturedementiauk.org
Other
61Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The website www.culturedementiauk.org appears to be a Wix-built site focused on dementia culture support, but the content is minimal and lacks substantive business or contact information. The technical infrastructure relies on Wix platform scripts and standard polyfills, with Sentry used for error monitoring. However, there is no evidence of security best practices such as HTTPS enforcement or security headers. The absence of privacy, cookie, and terms of service policies indicates poor compliance with data protection regulations. WHOIS data is unavailable due to a malformed query response, which raises concerns about domain legitimacy and ownership transparency. Overall, the site exhibits low digital maturity and limited trustworthiness.
Martikas Ltdmartikas.com
Other · United Kingdom
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Martikas Ltd is a small, privately owned travel agency specializing in luxury, corporate, and LGBT travel services. The company offers unique experiential travel including ski holidays, corporate events, and luxury vacations to destinations such as the Greek Islands. The website is built on GoDaddy's Website Builder platform and hosted by GoDaddy, reflecting a moderate level of digital maturity with basic mobile optimization and SEO. Security measures include HTTPS and Google reCAPTCHA v3 on the contact form, but lack advanced security headers and DNSSEC. Privacy compliance is minimal, relying on Google's privacy policies linked from reCAPTCHA disclosures without hosting their own privacy or cookie policies. Overall, the business appears legitimate with consistent WHOIS data and a domain age appropriate for the company's history.
The Writerthewriter.com
Media · United Kingdom
65Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Writer is a UK-based professional brand language consultancy specializing in writing, training, naming, and consulting services. The company targets businesses globally seeking to improve their brand communication and customer engagement through effective language. The website demonstrates a mature digital presence with modern technologies such as Nuxt.js and Vue.js, complemented by SEO best practices and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site projects professionalism and trustworthiness, though the absence of WHOIS data slightly impacts domain trust. Strategic recommendations include publishing a security policy, adding security headers, and establishing a vulnerability disclosure process.
NSSLGlobalnsslglobal.com
Technology · United Kingdom
63Medium
NIS2 55 · GDPR 53
NIS2 55 · GDPR 53
NSSLGlobal is a well-established systems integrator specializing in satellite communications and IT management solutions primarily for maritime, government, defence, and enterprise sectors. With over 50 years of experience, the company offers a broad portfolio of services including cybersecurity, digitalisation, crew welfare, and safety solutions. The website reflects a professional and comprehensive business presence with clear market positioning and a strong focus on customer empowerment. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, Hotjar, and LinkedIn Insight tags. It is well-optimized for SEO, mobile-friendly, and includes accessibility features. The site employs HTTPS with good SSL configuration and uses reCAPTCHA v3 for bot protection. However, explicit security headers are not visibly implemented, and no formal security policy or incident response contacts are published. From a security perspective, the site demonstrates good practices such as encrypted connections, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. The absence of a security.txt file and incident response information suggests room for improvement in transparency and readiness. Privacy compliance is strong with detailed policies and GDPR adherence. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen the security posture and trustworthiness.
- CChillisauce
chillisauce.com
Hospitality · United Kingdom
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Chillisauce is a well-established UK-based event organizing company specializing in stag dos, hen parties, corporate events, and group activity weekends across Europe. With over 20 years of experience and a large customer base, it holds a leading market position in the UK. The website presents a professional and consistent brand image, offering a wide range of services and destinations. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, integrates multiple marketing and analytics tools, and is hosted with reputable providers including Amazon Registrar and Cloudflare DNS. Security posture is good with HTTPS enabled and domain transfer protections, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is safe for general audiences and trustworthy based on domain age and WHOIS data.
SWG Events Limitedswgevents.co.uk
Other · United Kingdom
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
SWG Events Limited is a small UK-based company specializing in technical production services for a diverse range of events. Their key offerings include audio, lighting, video, staging, rigging, and production management, positioning them as a leading service provider in their niche market. The website is professionally designed using the Wix platform, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO features. However, the absence of privacy and cookie policies, as well as security headers, indicates room for improvement in compliance and security posture. The WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses but limits domain trust verification. Overall, the website presents a credible business front with clear contact information but lacks comprehensive privacy and security disclosures.
- WWiFi SPARK
hospedia.com
Technology
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
WiFi SPARK operates a specialized healthcare technology business focused on bedside entertainment and payment systems, having acquired Hospedia and rebranded to SPARK TSL. Their support portal provides detailed FAQs and resources for hospitals and patients regarding bedside units. The website is hosted on the Zendesk platform, leveraging modern web technologies such as jQuery and CSS3, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data for the subdomain is unavailable, limiting domain trust assessment. Overall, the site is professional and trustworthy for its niche audience but would benefit from enhanced privacy disclosures and security documentation.
Witton Lodge Community Associationwittonlodge.org.uk
Non-profit · United Kingdom
50Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Witton Lodge Community Association is a small non-profit organization based in the United Kingdom, focused on providing community services such as energy advice, housing support, health and wellbeing programs, and employment and skills training primarily for residents of North Birmingham. The website is built on WordPress, leveraging popular plugins like Yoast SEO and Slider Revolution, and integrates Google Analytics and push notification services for user engagement. The site demonstrates good design quality, mobile optimization, and SEO practices, with consistent branding and a clear navigation structure. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities detected, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy or terms of service found. Overall, the domain registration is consistent with the business history, enhancing trustworthiness. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture.
Dehnsdehns.com
Technology · United Kingdom
60Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Dehns is a leading European intellectual property law firm specializing in patents, trade marks, copyrights, designs, trade secrets, and consulting services. The firm boasts a top-tier reputation and extensive experience across the UK and Europe, serving a diverse clientele including individuals, businesses, in-house counsel, SMEs, startups, universities, and international associates. Their market position is reinforced by multiple prestigious awards and consistent high rankings. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 5 and integrates Google Tag Manager and Google Maps API, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security headers and public incident response policies. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and trust signals mitigate concerns. Overall, the site presents a low-risk profile with strong business credibility and good privacy compliance.
Kent Groupkentphk.co.uk
Transportation · United Kingdom
63Medium
NIS2 37 · GDPR 73
NIS2 37 · GDPR 73
Kent Group is a UK-based railway infrastructure engineering company with offices in Mansfield and Glasgow, specializing in electrical engineering and signalling power distribution projects. The company presents itself as a national player in the railway infrastructure sector, offering comprehensive engineering services. The website is professionally designed using the Wix platform, featuring project videos and structured data to enhance search visibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content supports a credible business presence. Security posture is moderate with room for improvement in headers and HTTPS enforcement. Privacy compliance is lacking due to missing policies and consent mechanisms. Overall, the website is functional and professional but requires enhancements in security and compliance to strengthen trust and regulatory adherence.
- Vercel Security Checkpoint
dlapiper.com
Other
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.dlapiper.com is currently inaccessible due to a Vercel security checkpoint that blocks browser verification, resulting in a failure to load any meaningful content. Consequently, no business, contact, or compliance information is available for analysis. The domain WHOIS data is missing or unregistered, which raises concerns about the legitimacy or current registration status of the domain. The technical infrastructure is hosted on Vercel, but no further details on technology stack or performance can be ascertained due to the blocking mechanism. Security posture cannot be properly evaluated given the lack of accessible content and absence of security headers or SSL details. Overall, the site is effectively non-functional for external users, and the risk assessment is high due to lack of transparency and accessibility.
- Better Medicare Alliance
bettermedicarealliance.org
Healthcare · United States
65Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Better Medicare Alliance is a well-established nonprofit advocacy and research organization focused on Medicare Advantage, representing over 225 ally organizations and more than 1 million grassroots advocates. The website serves as a comprehensive resource hub for Medicare Advantage information, policy insights, and advocacy efforts, targeting beneficiaries, healthcare providers, and policymakers. The organization holds a leading market position in Medicare Advantage advocacy in the United States. Technically, the website is built on WordPress with a custom theme and uses modern plugins such as Gravity Forms and Yoast SEO. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and OptiMonk, supported by a cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs domain status protections to prevent unauthorized domain changes. However, it lacks DNSSEC and some recommended security headers like Content-Security-Policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent are clearly presented, supporting compliance with GDPR and related regulations. Overall, the website presents a low-risk profile with strong business credibility and professional digital presence. Strategic improvements in security headers and DNS security would further enhance its security posture.
Gemmell's Garden Centre Ltd.gemmellsgardencentre.co.uk
Retail · United Kingdom
74Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Gemmell's Garden Centre Ltd. operates as Ayrshire’s largest independent garden centre, offering a wide range of gardening products, gifts, a cafe, and kids play facilities. The company targets families and gardening enthusiasts in the Ayrshire region, combining physical retail with an online e-commerce platform. Their market position is strong locally, supported by a comprehensive product catalog and community engagement via social media and newsletters. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and SEO tools, providing a good user experience with mobile responsiveness and structured data for search engines. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. The lack of WHOIS domain registration data due to a domain naming rules error limits full trust assessment, but the website content and social presence indicate a legitimate business. Overall, the site is professional, secure, and compliant with privacy regulations, suitable for its retail business model.